Product Security Incident Response Engineer II

LinuxCareers; Redlands (CA); Presencial; USD 92 000 - 149 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Dental & Vision

401(k) with profit sharing

Paid vacation

Paid holidays

Resumo da oferta

Esri is seeking an Incident Response Product Security Engineer to protect the ArcGIS platform. Lead the Incident Response Lifecycle, validate findings, and drive improvements with engineering teams. Leverage FIRST PSIRT concepts, perform red-team exercises, and translate security issues into actionable tasks.

Required are 2+ years in CSIRT/CIRT/PSIRT, strong knowledge of security frameworks, and experience with Burp Suite. A Bachelors in a related field and US work authorization are essential.

Qualificações

• 2+ years of CSIRT, CIRT, or PSIRT in an enterprise-scale environment.
• Knowledge of FIRST, OWASP Top 10, SANS Top 25, CVE and related security frameworks.
• Experience with Burp Suite or similar automated security testing tools.
• Deep knowledge of Windows, Linux, cloud computing, and networking concepts.
• Understanding of common security weaknesses, attack and defense methodologies.
• Strong written and verbal communication skills with attention to detail.
• Bachelor's degree in computer science, engineering, information systems, data science, or related field.
• Authorization to work for any employer in the U.S. (visa sponsorship not available)

Responsabilidades

• Implement and advance the Incident Response Lifecycle using the FIRST PSIRT Framework.
• Validate, research, and translate security and privacy findings into concise issues.
• Facilitate red-teaming exercises to evaluate application security posture.
• Identify common patterns of vulnerability and privacy risk exposure across products.
• Write and maintain standard operating procedures, processes, and best-practice documentation.
• Effectively communicate security and privacy risk metrics and investigation outcomes to stakeholders.

Conhecimentos

CSIRT/CIRT/PSIRT experience

Security frameworks knowledge

Incident response

Security communication

US work authorization

Formação académica

Bachelor's degree in CS/Engineering/IS/Data Science

Ferramentas

Burp Suite

Descrição da oferta de emprego

Esri is seeking an Incident Response Product Security Engineer to protect the ArcGIS platform. Lead the Incident Response Lifecycle, validate findings, and drive improvements with engineering teams. Leverage FIRST PSIRT concepts, perform red-team exercises, and translate security issues into actionable tasks.

Required are 2+ years in CSIRT/CIRT/PSIRT, strong knowledge of security frameworks, and experience with Burp Suite. A Bachelors in a related field and US work authorization are essential.